{"schemaVersion":3,"id":"RHSA-2022:5459","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.24 security update","dates":{"published":"2024-09-29T18:52:13.000Z","modified":"2026-10-13T10:03:08.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":true,"selection":"version-preference"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"redhat","product":"jboss-as-appclient","name":"jboss-as-appclient","label":"jboss-as-appclient","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-appclient","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-cli","name":"jboss-as-cli","label":"jboss-as-cli","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-cli","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-client-all","name":"jboss-as-client-all","label":"jboss-as-client-all","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-client-all","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-clustering","name":"jboss-as-clustering","label":"jboss-as-clustering","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-clustering","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-cmp","name":"jboss-as-cmp","label":"jboss-as-cmp","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-cmp","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-configadmin","name":"jboss-as-configadmin","label":"jboss-as-configadmin","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-configadmin","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-connector","name":"jboss-as-connector","label":"jboss-as-connector","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-connector","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-controller","name":"jboss-as-controller","label":"jboss-as-controller","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-controller","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-controller-client","name":"jboss-as-controller-client","label":"jboss-as-controller-client","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-controller-client","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-core-security","name":"jboss-as-core-security","label":"jboss-as-core-security","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-core-security","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-deployment-repository","name":"jboss-as-deployment-repository","label":"jboss-as-deployment-repository","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-deployment-repository","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-deployment-scanner","name":"jboss-as-deployment-scanner","label":"jboss-as-deployment-scanner","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-deployment-scanner","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-domain-http","name":"jboss-as-domain-http","label":"jboss-as-domain-http","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-domain-http","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-domain-management","name":"jboss-as-domain-management","label":"jboss-as-domain-management","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-domain-management","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-ee","name":"jboss-as-ee","label":"jboss-as-ee","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-ee","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-ee-deployment","name":"jboss-as-ee-deployment","label":"jboss-as-ee-deployment","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-ee-deployment","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-ejb3","name":"jboss-as-ejb3","label":"jboss-as-ejb3","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-ejb3","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-embedded","name":"jboss-as-embedded","label":"jboss-as-embedded","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-embedded","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-host-controller","name":"jboss-as-host-controller","label":"jboss-as-host-controller","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-host-controller","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jacorb","name":"jboss-as-jacorb","label":"jboss-as-jacorb","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jacorb","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jaxr","name":"jboss-as-jaxr","label":"jboss-as-jaxr","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jaxr","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jaxrs","name":"jboss-as-jaxrs","label":"jboss-as-jaxrs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jaxrs","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jdr","name":"jboss-as-jdr","label":"jboss-as-jdr","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jdr","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jmx","name":"jboss-as-jmx","label":"jboss-as-jmx","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jmx","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jpa","name":"jboss-as-jpa","label":"jboss-as-jpa","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jpa","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jsf","name":"jboss-as-jsf","label":"jboss-as-jsf","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jsf","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-jsr77","name":"jboss-as-jsr77","label":"jboss-as-jsr77","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-jsr77","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-logging","name":"jboss-as-logging","label":"jboss-as-logging","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-logging","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-mail","name":"jboss-as-mail","label":"jboss-as-mail","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-mail","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-management-client-content","name":"jboss-as-management-client-content","label":"jboss-as-management-client-content","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-management-client-content","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-messaging","name":"jboss-as-messaging","label":"jboss-as-messaging","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-messaging","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-modcluster","name":"jboss-as-modcluster","label":"jboss-as-modcluster","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-modcluster","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-naming","name":"jboss-as-naming","label":"jboss-as-naming","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-naming","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-network","name":"jboss-as-network","label":"jboss-as-network","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-network","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-osgi","name":"jboss-as-osgi","label":"jboss-as-osgi","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-osgi","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-osgi-configadmin","name":"jboss-as-osgi-configadmin","label":"jboss-as-osgi-configadmin","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-osgi-configadmin","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-osgi-service","name":"jboss-as-osgi-service","label":"jboss-as-osgi-service","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-osgi-service","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-picketlink","name":"jboss-as-picketlink","label":"jboss-as-picketlink","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-picketlink","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-platform-mbean","name":"jboss-as-platform-mbean","label":"jboss-as-platform-mbean","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-platform-mbean","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-pojo","name":"jboss-as-pojo","label":"jboss-as-pojo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-pojo","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-process-controller","name":"jboss-as-process-controller","label":"jboss-as-process-controller","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-process-controller","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-protocol","name":"jboss-as-protocol","label":"jboss-as-protocol","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-protocol","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-remoting","name":"jboss-as-remoting","label":"jboss-as-remoting","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-remoting","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-sar","name":"jboss-as-sar","label":"jboss-as-sar","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-sar","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-security","name":"jboss-as-security","label":"jboss-as-security","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-security","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-server","name":"jboss-as-server","label":"jboss-as-server","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-server","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-system-jmx","name":"jboss-as-system-jmx","label":"jboss-as-system-jmx","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-system-jmx","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-threads","name":"jboss-as-threads","label":"jboss-as-threads","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-threads","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-transactions","name":"jboss-as-transactions","label":"jboss-as-transactions","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-transactions","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-version","name":"jboss-as-version","label":"jboss-as-version","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-version","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-web","name":"jboss-as-web","label":"jboss-as-web","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-web","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-webservices","name":"jboss-as-webservices","label":"jboss-as-webservices","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-webservices","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-weld","name":"jboss-as-weld","label":"jboss-as-weld","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-weld","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jboss-as-xts","name":"jboss-as-xts","label":"jboss-as-xts","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jboss-as-xts","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-appclient","name":"jbossas-appclient","label":"jbossas-appclient","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-appclient","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-bundles","name":"jbossas-bundles","label":"jbossas-bundles","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-bundles","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-core","name":"jbossas-core","label":"jbossas-core","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-core","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-domain","name":"jbossas-domain","label":"jbossas-domain","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-domain","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-javadocs","name":"jbossas-javadocs","label":"jbossas-javadocs","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-javadocs","purlType":"rpm","versions":[{"text":"< 0:7.5.24-1.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-1.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-modules-eap","name":"jbossas-modules-eap","label":"jbossas-modules-eap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-modules-eap","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-product-eap","name":"jbossas-product-eap","label":"jbossas-product-eap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-product-eap","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-standalone","name":"jbossas-standalone","label":"jbossas-standalone","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-standalone","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossas-welcome-content-eap","name":"jbossas-welcome-content-eap","label":"jbossas-welcome-content-eap","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossas-welcome-content-eap","purlType":"rpm","versions":[{"text":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.24-2.Final_redhat_00001.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossts","name":"jbossts","label":"jbossts","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossts","purlType":"rpm","versions":[{"text":"< 1:4.17.45-2.Final_redhat_2.1.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:4.17.45-2.Final_redhat_2.1.ep6.el6","eol":null,"hubHref":null},{"vendor":"redhat","product":"jbossweb","name":"jbossweb","label":"jbossweb","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/jbossweb","purlType":"rpm","versions":[{"text":"< 0:7.5.32-2.Final_redhat_1.2.ep6.el6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:7.5.32-2.Final_redhat_1.2.ep6.el6","eol":null,"hubHref":null}],"affectedCount":65,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://access.redhat.com/errata/RHSA-2022:5459","label":"access.redhat.com/errata/RHSA-2022:5459","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=appplatform&downloadType=securityPatches&version=6.4","label":"access.redhat.com/jbossnetwork/…","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/6.4","label":"access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/6.4","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/6.4/html-single/installation_guide/index","label":"access.redhat.com/documentation/…","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1857024","label":"bugzilla.redhat.com/show_bug.cgi?id=1857024","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1871928","label":"bugzilla.redhat.com/show_bug.cgi?id=1871928","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1873620","label":"bugzilla.redhat.com/show_bug.cgi?id=1873620","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1875176","label":"bugzilla.redhat.com/show_bug.cgi?id=1875176","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031667","label":"bugzilla.redhat.com/show_bug.cgi?id=2031667","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041949","label":"bugzilla.redhat.com/show_bug.cgi?id=2041949","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041959","label":"bugzilla.redhat.com/show_bug.cgi?id=2041959","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041967","label":"bugzilla.redhat.com/show_bug.cgi?id=2041967","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5459.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5459.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13935","label":"access.redhat.com/security/cve/CVE-2020-13935","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13935","label":"www.cve.org/CVERecord?id=CVE-2020-13935","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13935","label":"nvd.nist.gov/vuln/detail/CVE-2020-13935","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"http://mail-archives.apache.org/mod_mbox/tomcat-announce/202007.mbox/%3C39e4200c-6f4e-b85d-fe4b-a9c2bd5fdc3d%40apache.org%3E","label":"mail-archives.apache.org/mod_mbox/…","hostname":"mail-archives.apache.org","tags":["ARTICLE"]},{"url":"http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M7","label":"tomcat.apache.org/security-10.html","hostname":"tomcat.apache.org","tags":["ARTICLE"]},{"url":"http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.105","label":"tomcat.apache.org/security-7.html","hostname":"tomcat.apache.org","tags":["ARTICLE"]},{"url":"http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.57","label":"tomcat.apache.org/security-8.html","hostname":"tomcat.apache.org","tags":["ARTICLE"]},{"url":"http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.37","label":"tomcat.apache.org/security-9.html","hostname":"tomcat.apache.org","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14384","label":"access.redhat.com/security/cve/CVE-2020-14384","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14384","label":"www.cve.org/CVERecord?id=CVE-2020-14384","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14384","label":"nvd.nist.gov/vuln/detail/CVE-2020-14384","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4104","label":"access.redhat.com/security/cve/CVE-2021-4104","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-009","label":"access.redhat.com/security/vulnerabilities/RHSB-2021-009","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4104","label":"www.cve.org/CVERecord?id=CVE-2021-4104","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4104","label":"nvd.nist.gov/vuln/detail/CVE-2021-4104","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126","label":"github.com/apache/logging-log4j2/pull/608","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301","label":"github.com/apache/logging-log4j2/pull/608","hostname":"github.com","tags":["ARTICLE"]},{"url":"https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx","label":"lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx","hostname":"lists.apache.org","tags":["ARTICLE"]},{"url":"https://www.openwall.com/lists/oss-security/2021/12/13/1","label":"www.openwall.com/lists/oss-security/2021/12/13/1","hostname":"www.openwall.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23302","label":"access.redhat.com/security/cve/CVE-2022-23302","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23302","label":"www.cve.org/CVERecord?id=CVE-2022-23302","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23302","label":"nvd.nist.gov/vuln/detail/CVE-2022-23302","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/3","label":"www.openwall.com/lists/oss-security/2022/01/18/3","hostname":"www.openwall.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23305","label":"access.redhat.com/security/cve/CVE-2022-23305","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23305","label":"www.cve.org/CVERecord?id=CVE-2022-23305","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23305","label":"nvd.nist.gov/vuln/detail/CVE-2022-23305","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/4","label":"www.openwall.com/lists/oss-security/2022/01/18/4","hostname":"www.openwall.com","tags":["ARTICLE"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23307","label":"access.redhat.com/security/cve/CVE-2022-23307","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23307","label":"www.cve.org/CVERecord?id=CVE-2022-23307","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23307","label":"nvd.nist.gov/vuln/detail/CVE-2022-23307","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/5","label":"www.openwall.com/lists/oss-security/2022/01/18/5","hostname":"www.openwall.com","tags":["ARTICLE"]}],"lineage":{"upstream":["CVE-2020-13935","CVE-2020-14384","CVE-2021-4104","CVE-2022-23302","CVE-2022-23305","CVE-2022-23307"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-09-29T18:52:13.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-13T10:03:08.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T08:35:06.228Z","stale":false,"partial":false}}